The Cyber5W HEX-130 SIM Analysis course is a beginner-friendly digital forensics and incident response (DFIR) training module focused on Subscriber Identity Module (SIM) structure, data extraction, and analysis.
Course Overview & Core Topics
ā¢ SIM Formats: Explores physical and logical sizes, ranging from legacy full-size to modern Nano-SIM and eSIM architectures.
ā¢ Unique Identifiers: Teaches how to decode and interpret core SIM values (such as ICCID, IMSI, MCC, and MNC) directly from mobile devices or hardware readers.
ā¢ Data Extraction & Imaging: Covers methods for acquiring data images from SIM using specialized hardware readers and freeware forensic tools.
ā¢ Message & Timestamp Analysis: Instructs students on how to parse and decode stored SMS/text data and extract embedded timestamps.
ā¢ SIM Cloning: Examines the mechanics of SIM cloning, security implications, and scenarios where a forensic clone is necessary during an investigation.
ā¢ Prerequisites: Requires only a basic understanding of smartphones, though using a physical hardware SIM reader is recommended for hands-on practice.
Course Overview & Core Topics
ā¢ SIM Formats: Explores physical and logical sizes, ranging from legacy full-size to modern Nano-SIM and eSIM architectures.
ā¢ Unique Identifiers: Teaches how to decode and interpret core SIM values (such as ICCID, IMSI, MCC, and MNC) directly from mobile devices or hardware readers.
ā¢ Data Extraction & Imaging: Covers methods for acquiring data images from SIM using specialized hardware readers and freeware forensic tools.
ā¢ Message & Timestamp Analysis: Instructs students on how to parse and decode stored SMS/text data and extract embedded timestamps.
ā¢ SIM Cloning: Examines the mechanics of SIM cloning, security implications, and scenarios where a forensic clone is necessary during an investigation.
ā¢ Prerequisites: Requires only a basic understanding of smartphones, though using a physical hardware SIM reader is recommended for hands-on practice.
